Hard Time (Prison Sim) - Dangerous filesystem permissions, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hard Time Prison Sim published at the 'play' market has multiple vulnerabilities...

CVE-2014-5558

The CVE-2014-5558 issue affects the Android app Hard Time (Prison Sim) 1.111 (aka air.HardTime). The vulnerability is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The co...

CVE-2014-5558: Undefined Security Weakness

The Hard Time Prison Sim aka air.HardTime application 1.111 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6543

Name of the Vulnerable Software and Affected Versions The Hard Time Prison Sim aka air.HardTime version 1.111 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...